Well, one of my clients made an iTunes backup of her old iPhone right before she wipe and sell it. She never expected that the backup is corrupted till she got a new iPhone and tried to restore that backup and iTunes threw an error. Anyway, her main concern about the notes. I tried to explore the backup with some third party programs but none of them could get me the Notes. We also contacted with Apple to see if they can help with fixing the backup or with anything in general but unfortunately they couldn't offer us much help. I could extract Notes app documents and database but when I try to explore it in DB SQLite Browser, it says "Encrypted database" and it needs the password in order to decrypt it. My client does know nothing about it so, what are my options here? Brute-force? or what exactly as I don't have any experience when it comes to SQL databases.
The Easy Method
- Check on iCloud.com - Sign in and Navigate to the Notes App
- Check on other emails used - iPhone saves none local (and non iCloud) Notes as emails on the users email server. Navigate to the email login for the email they use and check for a Notes folder. In Gmail its on the left sides bar.
The Easy Method works then the client can set up the phone from scratch and sign in with there email. The notes should sync.
The Technical Method
- Restore the iPhone and login with the same Apple ID, create a single note. Backup this phone (non-encrypted). Navigate to the Notes folder on the new backup and replace the contents in the new backup with the contents of the notes from the old backup. Restore the phone using the new backup. If it says its corrupted then the Notes are probably indeed corrupted.
The Hacking Method
- I suggest heading over to https://security.stackexchange.com for cracking hashes and other things.
Make a backup in iTunes normally. Archive it. Make another backup
Make sure all notes are on iCloud or a Email Server
Use a Mac --> This ones just a preference :)